IDP Specific

To assign WordPress roles based on groups in Azure, you will need to send the Azure groups in SAML response to WordPress.

To do so, you can follow these steps –

1. In the Enterprise application section, go to the application you have created in AzureAD for your WordPress site.
2. Under the Overview section, select the Set up Single Sign-On(SSO) option.



3. In the User Attributes & Claims section, click on the Edit button.



4. Navigate to the Add a group claim tab in the header section.
5. Select any group from the group claims and click on Save.



Note: If you are using Azure Cloud Connect you can also select your SAML Account name instead of Group ID from the dropdown.

6. Now, navigate to the Service Provider Setup tab in the plugin and click on the Test Configuration button.
7. If the configurations are successfully set up, you will see the attributes received from AzureAD. Make note of the Attribute Name in which the Groups values are being received.



8. Go to Attribute/Role Mapping tab in the plugin and under Attribute Mapping, select the Group Attribute Name from the dropdown for the Group/Role attribute. Click on Save.



9. Now scroll down the same tab you will find the Role Mapping section.
10. In this section, specify the group values you received from IDP to their respective Role fields and click on Save.



Note: If you are using Azure Cloud Connect and have selected SAML Account Name, your name will be displayed in the fields.

11. Now whenever the user assigned in the group performs the Single Sign-On, the user will be assigned a role as configured in the role mapping.



If you are still facing issues then feel free to reach us at samlsupport@xecurify.com